Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier: Ov1cjp0hy+rXe0zxAyx67ruUlq+eFS/nRsITNgdQ8n8=
Subject key identifier: B7:F5:EF:A7:F7:AC:C5:44:83:8B:02:2B:A8:36:7A:30:CC:48:8D:19
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial: 01978BB5DF62DBC99CC8AAE83358D5DEE71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number: 018F
Signing time: Fri 20 Jun 2025 05:00:41 +0000
Manifest this update: Fri 20 Jun 2025 05:00:41 +0000
Manifest next update: Sat 21 Jun 2025 05:00:41 +0000
Files and hashes: 1: 3rwXWtFbCIuCgGU96PeqAGUhWU4.roa (hash: rp0bCqxBlPPCcVLUBh0MkWETtPWfiqbHwRVpOhMjnK4=)
2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: M8BIakwIgWftKZEyb3AmXm/q4OKS8IqkFjHziwW02ds=)
3: wmuRmPBv_IlkfBBV-hF7o6UUILQ.roa (hash: hs6pyaykF/zQtIhils9uIo2Funb7iBy2l/PAgFXmXMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:b5:df:62:db:c9:9c:c8:aa:e8:33:58:d5:de:e7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Validity
Not Before: Jun 20 05:00:41 2025 GMT
Not After : Jun 21 05:00:41 2025 GMT
Subject: CN=b7f5efa7f7acc544838b022ba8367a30cc488d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0d:b5:87:2b:3a:c4:9c:fb:68:ea:af:15:23:
89:95:7e:af:8c:56:f1:b6:6e:d8:7e:73:20:78:1c:
e2:4b:4d:35:eb:75:bc:f8:f5:ce:42:35:48:2b:69:
5c:8c:2a:59:cb:57:f7:73:45:e7:98:b5:c0:dd:23:
75:b0:fa:53:cc:f7:60:59:c1:e3:27:7a:14:63:24:
81:60:5b:8f:41:c5:a8:44:f2:9d:8f:df:bb:1a:4a:
48:25:69:91:15:24:6a:f5:2a:ef:e1:8d:90:87:0d:
6e:68:5d:ab:79:fa:1e:91:f7:0a:f8:96:59:e6:72:
73:be:fd:e7:a0:fb:42:e1:b2:d1:bf:81:d4:31:e3:
de:f0:a8:58:71:bc:09:69:70:7c:87:6c:d5:90:eb:
3e:b4:17:fc:2e:e6:6a:fc:b1:c3:ec:6f:e0:7a:60:
16:b6:de:b4:87:4b:ac:61:89:14:a2:f0:f8:cc:90:
e8:fb:c1:e3:a3:a7:4a:95:da:a7:8c:73:cc:c5:e2:
85:13:fd:b0:7d:93:0a:b7:a1:d2:e0:f3:82:10:31:
60:97:aa:5e:e0:e3:51:cf:12:97:04:94:c4:70:07:
79:a9:71:83:95:ed:2d:63:8c:7b:d6:f3:94:b8:85:
c1:9e:c5:d8:ff:7b:93:51:ac:e8:9e:32:ef:e5:6a:
ba:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F5:EF:A7:F7:AC:C5:44:83:8B:02:2B:A8:36:7A:30:CC:48:8D:19
X509v3 Authority Key Identifier:
keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a8:a5:e3:e7:c7:6f:13:54:94:5f:1b:67:5d:a8:50:76:07:
30:0e:d0:c2:9f:e6:72:c0:b8:e9:94:da:75:85:a2:a9:56:40:
a1:d3:07:c3:8f:7c:fa:61:25:f7:9c:a6:ff:42:a0:01:ef:64:
f8:9b:4e:1a:7b:01:4f:85:eb:6c:f2:9e:6e:66:84:f5:5d:9a:
6c:a5:bd:29:d9:7e:ae:e7:73:fc:2f:94:e9:b8:b0:c4:32:64:
98:47:92:03:50:be:0e:11:d0:8e:d5:1d:3b:bd:dd:c7:3b:cc:
25:30:10:30:0c:54:4d:77:d9:04:06:57:5a:11:16:aa:0b:c7:
d8:43:9b:fb:84:55:60:7e:aa:e2:87:cc:78:26:87:3b:33:c0:
cf:6c:c9:f4:ef:79:47:bb:84:80:97:ab:25:12:f8:65:44:53:
31:ca:c2:d1:b7:90:f4:16:b0:02:07:25:76:a4:6d:e0:1c:9e:
04:07:12:22:ba:61:78:26:5c:a6:ae:8d:6e:0a:ae:48:60:31:
f6:00:d1:6d:b8:f9:ca:fc:89:90:d0:8e:98:77:a3:c5:5c:f1:
d4:e6:94:d5:dd:b7:d6:fa:66:0e:fb:41:bc:38:4d:2d:64:e7:
03:54:97:7b:5d:a9:e3:2b:b8:37:26:e9:af:b6:23:1c:84:21:
c7:b2:78:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeLtd9i28mcyKroM1jV3ucdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MjEwMGYwYjE5OTFkODBhNDY0MjFkOWZlNTE0N2YyZDU1
YWM5MzAwHhcNMjUwNjIwMDUwMDQxWhcNMjUwNjIxMDUwMDQxWjAzMTEwLwYDVQQD
EyhiN2Y1ZWZhN2Y3YWNjNTQ0ODM4YjAyMmJhODM2N2EzMGNjNDg4ZDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5A21hys6xJz7aOqvFSOJlX6vjFbx
tm7YfnMgeBziS00163W8+PXOQjVIK2lcjCpZy1f3c0XnmLXA3SN1sPpTzPdgWcHj
J3oUYySBYFuPQcWoRPKdj9+7GkpIJWmRFSRq9Srv4Y2Qhw1uaF2refoekfcK+JZZ
5nJzvv3noPtC4bLRv4HUMePe8KhYcbwJaXB8h2zVkOs+tBf8LuZq/LHD7G/gemAW
tt60h0usYYkUovD4zJDo+8Hjo6dKldqnjHPMxeKFE/2wfZMKt6HS4POCEDFgl6pe
4ONRzxKXBJTEcAd5qXGDle0tY4x71vOUuIXBnsXY/3uTUazonjLv5Wq69QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLf176f3rMVEg4sCK6g2ejDMSI0ZMB8GA1UdIwQY
MBaAFAghAPCxmR2ApGQh2f5RR/LVWskwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQt
NDA5ODlkMGRmYzVjLzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQtNDA5ODlkMGRmYzVj
LzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6il4+fH
bxNUlF8bZ12oUHYHMA7Qwp/mcsC46ZTadYWiqVZAodMHw498+mEl95ym/0KgAe9k
+JtOGnsBT4XrbPKebmaE9V2abKW9Kdl+rudz/C+U6biwxDJkmEeSA1C+DhHQjtUd
O73dxzvMJTAQMAxUTXfZBAZXWhEWqgvH2EOb+4RVYH6q4ofMeCaHOzPAz2zJ9O95
R7uEgJerJRL4ZURTMcrC0beQ9BawAgcldqRt4ByeBAcSIrpheCZcpq6NbgquSGAx
9gDRbbj5yvyJkNCOmHejxVzx1OaU1d231vpmDvtBvDhNLWTnA1SXe12p4yu4Nybp
r7YjHIQhx7J4wA==
-----END CERTIFICATE-----
Generated at Fri Jun 20 10:34:29 2025 by rpki-client